Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/6ktd2dvHIKpmAOHGoG6mg_3--s4.roa
File: 6ktd2dvHIKpmAOHGoG6mg_3--s4.roa (raw, json)
Hash identifier: fHRUmt+thpt2tIvT9BIsbWfzDEEP3ZQZgqsDleQ+buw=
Subject key identifier: EA:4B:5D:D9:DB:C7:20:AA:66:00:E1:C6:A0:6E:A6:83:FD:FE:FA:CE
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 5FDE
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6ktd2dvHIKpmAOHGoG6mg_3--s4.roa
Signing time: Tue 13 May 2025 17:40:16 +0000
ROA not before: Tue 13 May 2025 17:40:16 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24542 (0x5fde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: May 13 17:40:16 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=EA4B5DD9DBC720AA6600E1C6A06EA683FDFEFACE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:4d:d6:bc:d5:6c:ec:b4:48:d1:1e:69:42:
03:0a:f1:9a:85:25:41:99:24:c1:c4:76:75:a7:78:
73:8b:85:08:54:62:f1:92:4e:42:1b:34:01:e0:59:
63:90:db:c6:1e:78:31:90:12:19:82:d0:fd:5a:0d:
b5:5d:a1:77:0f:8f:7d:80:b1:68:13:4c:a2:5f:3b:
56:97:42:0c:69:39:45:fb:0d:e7:cc:27:81:45:19:
0b:88:8a:b8:a4:12:fd:14:9f:37:de:60:a1:33:c5:
3d:1d:14:f6:6f:0f:22:99:07:6c:54:61:4a:f5:20:
88:7a:90:dd:5f:d3:de:b9:70:68:5c:e8:47:79:9b:
4a:79:48:d0:b5:d7:e3:d6:31:ef:7b:9c:44:65:ca:
67:02:e6:b3:21:76:54:b1:32:28:3f:37:02:d3:ce:
1f:93:ae:6d:1e:3e:e5:40:eb:91:c9:d1:f1:ad:50:
01:4f:ca:9a:80:5d:de:d5:cd:1d:bb:20:04:6d:5d:
66:21:1e:be:ba:7c:6e:07:a7:53:b1:9f:5d:3a:94:
e8:4b:79:cb:31:dd:f0:a5:d3:2f:64:9a:3a:c7:08:
eb:36:a0:ad:53:02:1b:f4:15:16:de:93:2a:a9:5f:
ab:db:1f:ff:95:98:0a:19:9e:34:b1:9b:7f:9b:52:
b7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4B:5D:D9:DB:C7:20:AA:66:00:E1:C6:A0:6E:A6:83:FD:FE:FA:CE
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/6ktd2dvHIKpmAOHGoG6mg_3--s4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
8f:f2:0f:62:60:f4:1d:24:bc:b6:4e:77:7d:84:cc:39:c7:b0:
8c:84:fc:fe:12:42:51:1f:d3:9e:87:fe:d5:60:b6:65:f5:84:
93:88:65:87:00:2f:bd:49:5d:92:ec:84:b3:03:8d:30:68:e8:
91:04:ef:a6:11:07:5b:19:86:84:ad:a6:92:38:5c:19:a6:96:
5e:97:4f:13:65:0f:25:e6:56:5e:c5:a6:55:5e:50:9b:15:aa:
06:c1:7b:e9:7b:f5:b3:82:55:bc:ea:58:6d:f4:02:ef:03:36:
f8:fa:e6:15:30:37:a7:5b:9a:24:67:b7:e0:45:1e:71:76:b4:
8e:19:3a:e1:89:ca:d8:43:ab:b7:43:4a:02:ca:fa:14:d6:23:
b6:5a:6a:14:92:d2:b3:a5:b1:52:eb:41:87:cb:ca:9c:71:dd:
67:cd:27:a8:45:80:d4:2a:a4:31:07:72:b7:00:09:47:00:3f:
83:e8:76:f9:1a:a9:86:09:b2:cb:27:f4:14:a6:37:c6:a0:7d:
93:df:c2:36:17:86:0e:f2:a8:c1:52:7b:a7:20:1d:4a:34:19:
8f:03:19:28:bc:bb:d4:e5:eb:a6:fe:69:09:a1:72:71:ed:2e:
68:4f:07:80:c0:63:43:9a:22:3b:77:1a:6b:95:e9:29:43:da:
e8:79:2e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:30:24 2025 by rpki-client